$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/39a3c335-38d7-3c81-ab5c-b46ffe7b5ac3.roa File: 39a3c335-38d7-3c81-ab5c-b46ffe7b5ac3.roa (raw, json) Hash identifier: VElRU583ZLQXNnncgYxRo5cKJVEp3ZcuEi+7YLdYlZ0= Subject key identifier: 9C:97:5A:3F:3B:A9:8F:F9:C9:67:3D:3A:B0:8B:B8:04:B4:0D:3F:9C Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F4328584EE0C2061037E819B088152900 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/39a3c335-38d7-3c81-ab5c-b46ffe7b5ac3.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 53508 IP address blocks: 24.89.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c2:06:10:37:e8:19:b0:88:15:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=07fab0df-901a-40af-a4b8-422706d6e354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7d:13:d6:d2:3d:97:a6:d9:32:48:7a:4f:6b: a2:b2:27:f1:c8:37:8b:00:8b:b0:7c:be:92:2b:8c: 2c:85:49:97:3a:d0:69:93:dc:2e:91:ef:06:10:73: 2f:b7:dd:43:6e:74:57:1b:67:68:64:b2:82:45:2c: 76:c9:09:3f:c2:af:7a:c9:e8:05:cc:4a:e1:d6:77: 48:21:3a:d6:c0:cd:fd:a0:ec:07:15:8a:22:dc:24: 79:c0:9f:05:0e:71:03:28:f1:45:93:13:f0:d8:40: dd:1a:6a:06:3d:25:2f:74:3e:37:2e:c0:66:4b:bf: 2b:b5:8d:2f:91:78:59:ed:d0:a7:84:c2:e6:47:06: c3:4f:dd:74:34:b8:5e:06:82:5f:31:21:13:9e:39: b9:4d:23:29:8b:21:b5:f9:70:54:d1:aa:a2:72:be: d9:69:04:25:47:9e:fa:c8:b2:11:63:5e:f0:ce:44: 68:8a:0a:28:83:95:40:0f:66:62:a1:a2:ec:d2:e7: a1:9b:67:5f:98:7a:4b:f5:b0:13:99:9a:55:b0:ec: 72:0c:99:d7:dd:39:89:f5:87:54:08:7e:a3:0f:4e: 63:3b:4f:28:de:08:6e:9e:24:97:eb:79:71:41:a9: 4d:d2:c8:f8:e6:f5:ba:f3:b7:2e:c3:74:0b:fc:14: ca:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:97:5A:3F:3B:A9:8F:F9:C9:67:3D:3A:B0:8B:B8:04:B4:0D:3F:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/39a3c335-38d7-3c81-ab5c-b46ffe7b5ac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 24.89.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:69:ec:3c:1f:d8:0c:d4:aa:86:d7:42:99:29:01:e8:c0:67: 9c:4a:71:fe:33:76:3d:7d:16:10:20:b2:4f:d1:ac:02:da:dd: e7:cd:c2:d3:d6:52:3f:d9:83:18:70:00:8a:ef:d0:85:2c:0c: 95:2e:b6:5e:ab:05:8d:e0:03:43:3c:58:78:c1:89:35:ed:cc: 05:0b:c8:6d:ca:89:72:f4:fd:a0:9b:e1:5a:d4:0d:56:d4:9d: f1:72:90:a9:7e:d8:58:5c:2e:18:df:60:c2:57:20:d2:dc:85: a7:1a:a5:b1:40:51:38:ab:0e:a7:24:f2:c4:ea:d8:1a:49:6a: c2:72:46:44:d4:90:f7:ae:f0:62:08:cb:b1:e7:d0:48:d0:35: 09:1a:29:72:b4:a4:41:3b:eb:fd:ff:9b:f7:69:52:c8:32:f3: b4:e2:b7:3b:b3:51:65:41:15:b0:03:14:dc:6f:23:90:16:82: 75:c5:74:56:b4:d0:8f:bb:0d:ad:5f:96:24:05:bb:f5:97:f8: 95:b5:79:53:24:96:cc:9c:e5:07:53:fa:36:fd:6c:a0:ea:b3: 4b:a4:c5:a6:16:10:4d:91:5b:fd:4d:d7:6a:97:b1:85:9d:e7: a9:60:54:8a:18:6f:06:3f:57:bb:b0:a6:0b:a3:c2:40:fc:c6: 70:e6:ee:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwgYQN+gZsIgVKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk MDdmYWIwZGYtOTAxYS00MGFmLWE0YjgtNDIyNzA2ZDZlMzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAin0T1tI9l6bZMkh6T2uisifxyDeLAIuwfL6S K4wshUmXOtBpk9wuke8GEHMvt91DbnRXG2doZLKCRSx2yQk/wq96yegFzErh1ndI ITrWwM39oOwHFYoi3CR5wJ8FDnEDKPFFkxPw2EDdGmoGPSUvdD43LsBmS78rtY0v kXhZ7dCnhMLmRwbDT910NLheBoJfMSETnjm5TSMpiyG1+XBU0aqicr7ZaQQlR576 yLIRY17wzkRoigoog5VAD2ZioaLs0uehm2dfmHpL9bATmZpVsOxyDJnX3TmJ9YdU CH6jD05jO08o3ghuniSX63lxQalN0sj45vW687cuw3QL/BTK6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyXWj87qY/5yWc9OrCLuAS0DT+cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMzlhM2MzMzUtMzhkNy0z YzgxLWFiNWMtYjQ2ZmZlN2I1YWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGFk4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVp7Dwf2AzUqobXQpkpAejAZ5xKcf4zdj19FhAgsk/RrALa3efNwtPW Uj/ZgxhwAIrv0IUsDJUutl6rBY3gA0M8WHjBiTXtzAULyG3KiXL0/aCb4VrUDVbU nfFykKl+2FhcLhjfYMJXINLchacapbFAUTirDqck8sTq2BpJasJyRkTUkPeu8GII y7Hn0EjQNQkaKXK0pEE76/3/m/dpUsgy87TitzuzUWVBFbADFNxvI5AWgnXFdFa0 0I+7Da1fliQFu/WX+JW1eVMklsyc5QdT+jb9bKDqs0ukxaYWEE2RW/1N12qXsYWd 56lgVIoYbwY/V7uwpgujwkD8xnDm7kE= -----END CERTIFICATE-----Generated at Sat Sep 26 11:04:30 2026 by rpki-client